Protecting media content integrity across untrusted networks

A method, comprising:

• performing, by one or more computing devices that implement a media player:
• receiving a manifest from a provider network, wherein the manifest comprises at least a public key and an indication of a location at an edge network from which the media content can be retrieved, and wherein the manifest is received by the media player over a secure connection with the provider network in accordance with a security communication protocol;
• retrieving at least some of the media content from the location, wherein the retrieved media content comprises a plurality of content portions of the media content;
• playing a content portion of the plurality of content portions of the media content;
• subsequent to playing the content portion, using the public key received by the media player from the provider network to determine whether a digital signature of the content portion is valid;
• and
• based on a determination that the digital signature of the content portion is valid, playing one or more additional content portions of the plurality of content portions of the media content.

One or more non-transitory computer-accessible storage media storing program instructions that when executed on or across one or more processors cause the one or more processors to implement a media player to:

• receive a manifest from a provider network, wherein the manifest comprises at least a public key and an indication of a location at an edge network from which the media content can be retrieved, and wherein the manifest is received by the media player over a secure connection with the provider network in accordance with a security communication protocol;
• retrieve at least some of the media content from the location, wherein the retrieved media content comprises a plurality of content portions of the media content;
• play a content portion of the plurality of content portions of the media content;
• subsequent to the playing of the content portion, use the public key received by the media player from the provider network to determine whether a digital signature of the content portion is valid;
• and
• based on a determination that the digital signature of the content portion is valid, play one or more additional content portions of the plurality of content portions of the media content.